Skip to content
Heist/ feed
UnratedFix available

axios v0.33.0 security fixes

Type: patchSource: Axios1 source record

axios v0.33.0 hardens request configuration handling and form serialization.

Announced Group revision 1
Original source ↗

github-axios-axios

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

🔒 Security Fixes Request Config Hardening: Uses own-property reads for nested request options affecting auth, params, proxy, and data handling; adds bounded form serialisation depth checks; normalises nullish Basic Auth credentials; and treats 0.0.0.0 as local for proxy bypass.

axios

Release notes from axios
Affected versions
Not stated in this extraction
Fixed versions
v0.33.0
v0.33.0 — June 13, 2026
Prerequisites
Not stated in this extraction

Publisher severity

No explicit severity was extracted.

Event
#79299 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement